31、修正了一个使用MS-SQL时的初始化问题,这个问题可能导致mssql_query()函数的崩溃。(Zeev)
32、把PCRE升级到3.2,并且修正了一个选定的样式为一空字符串时的BUG。(Andrei)
33、修正了一个使得PHP无法直接从PHP.INI里读取extension_dir的BUG。(Zeev)
34、如果曾经定义过错误句柄,用set_error_handler()可以返回这个句柄的名字。(Zeev, Zend Engine)
35、宣布正式死亡(Declared officially dead,哈哈,老外很幽默吧)。这个功能在PHP 4.0.0里已经不能使用。(Zeev)
36、convert_cyr_string()对二进制传操作更加安全,而且在和其他PHP变量冲突是会停下。(Andi)
37、增加了array_unique、array_intersect和array_diff三个函数。(Stig Venaas)
38、修正了当使用未初始化的值和字符串的比较的问题。现在又和PHP3一样,把这些值当作空串处理。(Andi & Zeev, Zend Engine)
39、修正了date()函数使用时,'Z'标记在夏令时中出现的问题。(Andrei)
40、修正了var_dump()不会改变数组元素内部顺序的问题。(Zeev)
41、修正了过去stripcslashes()对于未知的转义符什么都不做为去掉 \ 。(Andrei)
42、WDDX现在总是把数组转化为结构体。(Andrei)
43、include_once()在找不到文件是将给出一个警告。(Zeev, Zend Engine)
44、修正了get_declared_classes()在某些情况下会返回多次相同结果的BUG。(Zeev, Zend Engine)
45、修正了rawurldecode()的参数冲突的BUG。(Zeev)
46、WIN32环境下CGI模式,php.ini中的设置错误将不再在HTTP的头部显示错误(就是那个powered by php ....)而是显示一个对话框。(Zeev)
47、修正了OCIFetchStatement()中在读完所有数据后,继续尝试读操作的错误。(Thies)
48、fopen_wrappers() are now extensible via modules
48、fopen_wrappers()现在可以通过模块扩展(不懂!我把原文留着)。(Hartmut Holzgraefe)
49、在使用trim是,去掉\0,使之和PHP3兼容。(Rasmus)
50、增加了imagecreatefromxbm()函数。(Jouni)
51、增加了imagewbmp()函数。(Jouni, based on patch from Rune Nordb?e Skillingstad)
52、增加了str_pad()用来把任意字符串添加到原字符串的左边或右边。(Andrei)
53、使short_tags,asp_tags和allow_call_time_pass_reference这些初始化指示能够以目录为基础(就是每个目录有自己的定义),比如,在.htaccess文件里设置。(Zeev)
54、增加了fflush()函数。(Eric Huss)
55、修正了当静态变量,默认的函数参数或类成员变量是数组时的问题。(Andi & Zeev, Zend Engine)
56、修正了virtual()函数使用输出缓存的问题。(Marc Pohl)
57、清除了flock()中的常量,并且增加了增加了第三个参数(EWOULDBLOCK时为true)。(Rasmus)
58、增加了pg_loimport()和pg_loexport()函数。(Jouni)
59、在getimagesize()中增加了对SWF文件的支持(应该是FLASH的文件吧)。(Derick Rethans)
60、增加了对有索引和无索引的文件数组的上传功能。如:eg. name="file[]" type="file"。(Rasmus)

PHPsessionscanstorestrings,numbers,arrays,andobjects.1.Strings:textdatalikeusernames.2.Numbers:integersorfloatsforcounters.3.Arrays:listslikeshoppingcarts.4.Objects:complexstructuresthatareserialized.

TostartaPHPsession,usesession_start()atthescript'sbeginning.1)Placeitbeforeanyoutputtosetthesessioncookie.2)Usesessionsforuserdatalikeloginstatusorshoppingcarts.3)RegeneratesessionIDstopreventfixationattacks.4)Considerusingadatabaseforsessionstoragei

Session regeneration refers to generating a new session ID and invalidating the old ID when the user performs sensitive operations in case of session fixed attacks. The implementation steps include: 1. Detect sensitive operations, 2. Generate new session ID, 3. Destroy old session ID, 4. Update user-side session information.

PHP sessions have a significant impact on application performance. Optimization methods include: 1. Use a database to store session data to improve response speed; 2. Reduce the use of session data and only store necessary information; 3. Use a non-blocking session processor to improve concurrency capabilities; 4. Adjust the session expiration time to balance user experience and server burden; 5. Use persistent sessions to reduce the number of data read and write times.

PHPsessionsareserver-side,whilecookiesareclient-side.1)Sessionsstoredataontheserver,aremoresecure,andhandlelargerdata.2)Cookiesstoredataontheclient,arelesssecure,andlimitedinsize.Usesessionsforsensitivedataandcookiesfornon-sensitive,client-sidedata.

PHPidentifiesauser'ssessionusingsessioncookiesandsessionIDs.1)Whensession_start()iscalled,PHPgeneratesauniquesessionIDstoredinacookienamedPHPSESSIDontheuser'sbrowser.2)ThisIDallowsPHPtoretrievesessiondatafromtheserver.

The security of PHP sessions can be achieved through the following measures: 1. Use session_regenerate_id() to regenerate the session ID when the user logs in or is an important operation. 2. Encrypt the transmission session ID through the HTTPS protocol. 3. Use session_save_path() to specify the secure directory to store session data and set permissions correctly.

PHPsessionfilesarestoredinthedirectoryspecifiedbysession.save_path,typically/tmponUnix-likesystemsorC:\Windows\TemponWindows.Tocustomizethis:1)Usesession_save_path()tosetacustomdirectory,ensuringit'swritable;2)Verifythecustomdirectoryexistsandiswrita


Hot AI Tools

Undresser.AI Undress
AI-powered app for creating realistic nude photos

AI Clothes Remover
Online AI tool for removing clothes from photos.

Undress AI Tool
Undress images for free

Clothoff.io
AI clothes remover

Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!

Hot Article

Hot Tools

SublimeText3 Chinese version
Chinese version, very easy to use

SAP NetWeaver Server Adapter for Eclipse
Integrate Eclipse with SAP NetWeaver application server.

SublimeText3 English version
Recommended: Win version, supports code prompts!

mPDF
mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),

SecLists
SecLists is the ultimate security tester's companion. It is a collection of various types of lists that are frequently used during security assessments, all in one place. SecLists helps make security testing more efficient and productive by conveniently providing all the lists a security tester might need. List types include usernames, passwords, URLs, fuzzing payloads, sensitive data patterns, web shells, and more. The tester can simply pull this repository onto a new test machine and he will have access to every type of list he needs.
